[Solved] Which of the following is a recommended practice by CIS Docker Benchmark for container images? — Ans: Use minimal base images to reduce attack surface | Docker

Docker - Security

Which of the following is a recommended practice by CIS Docker Benchmark for container images?

AUse the latest tag for all images

BAlways run containers as root user

CDisable image scanning for faster deployment

DUse minimal base images to reduce attack surface

Step-by-Step Solution

Solution:

Step 1: Review CIS recommendation on images
CIS advises using minimal base images to reduce vulnerabilities and attack surface.
Step 2: Evaluate other options
Running as root, disabling scanning, and using latest tag are discouraged for security reasons.
Final Answer:
Use minimal base images to reduce attack surface -> Option D
Quick Check:
Image security = Minimal base images [OK]

Quick Trick: Minimal images reduce vulnerabilities and improve security [OK]

Common Mistakes:

Master "Security" in Docker

9 interactive learning modes - each teaches the same concept differently

More Docker Quizzes

Which of the following is a recommended practice by CIS Docker Benchmark for container images?